Create a Certificate Request Using OpenSSL
![]() Note |
|
To generate the CSR from the command line with OpenSSL use these instructions:
Procedure
Step 1 |
SSH to the Expressway and log in as root. |
Step 2 |
Make a new directory to do the work in - |
Step 3 |
Move in to this directory - |
Step 4 |
Copy the Open SSL configuration file we use for CSR to this directory, as we need to edit it (Note: Keep the dot at the end) - |
Step 5 |
Open the file for editing – |
Step 6 |
Find the line " |
Step 7 |
Uncomment the line " |
Step 8 |
Make sure that the line " |
Step 9 |
Find the line "
|
Step 10 |
Now save the file and exit. |
Step 11 |
Run the following OpenSSL command to generate a new CSR and Private key for the VCS " |
Step 12 |
The console displays output similar to the following example, where you are required to enter information. You do not need to populate all of them, but some fields are required:
When you have completed the fields, you will have two new files, myrequest.csr and privatekey.pem. |
Step 13 |
(Optional) If you want to validate the DNS entries have been entered correctly into the request, the myrequest.csr file can be decoded using the command: |
Step 14 |
Submit the CSR to your chosen Certificate Authority, who will provide the public certificate. |
Step 15 |
Upload the public certificate to the VCS via "Select the server certificate file" entry box. webpage, |
Step 16 |
Upload the privatekey.pem to the VCS via webpage, "Select the server private key file" entry box. |
The privatekey.pem should be kept safe.